Vulnerabilities (CVE)

Filtered by vendor Sun Subscribe
Filtered by product Ehrd
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-10510 1 Sun 1 Ehrd 2021-07-21 4.0 MEDIUM 6.5 MEDIUM
Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a specific URL, access unauthorized functionality and data.
CVE-2020-10509 1 Sun 1 Ehrd 2020-03-30 4.3 MEDIUM 6.1 MEDIUM
Sunnet eHRD, a human training and development management system, contains vulnerability of Cross-Site Scripting (XSS), attackers can inject arbitrary command into the system and launch XSS attack.